ConnectWise · ScreenConnect
CVE-2024-1709
Authentication bypass using an alternate path or channel
무엇인가
ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel
vulnerability, which may allow an attacker direct access to confidential information or
critical systems.
CISA: ConnectWise ScreenConnect contains an authentication bypass vulnerability that allows an attacker with network access to the management interface to create a new, administrator-level account on affected devices.
할 일
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
미국 연방 기관 조치 기한: 2024년 2월 29일
- CISA 목록에 추가됨
- 2024년 2월 22일
- 게시됨
- 2024년 2월 21일
- 심각도
- 치명적 10.0 CVSS 3.1
- 향후 30일 내 공격 가능성(EPSS)
- >99.9% 알려진 모든 취약점 중 상위 0.1%
- 약점 유형
- CWE-288
- 자세히
- NVD · CVE.org · CISA
모든 참고 자료(10)
- https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8
- https://www.huntress.com/blog/vulnerability-reproduced-immediately-patch-screenconnect-23-9-8
- https://www.huntress.com/blog/detection-guidance-for-connectwise-cwe-288-2
- https://www.bleepingcomputer.com/news/security/connectwise-urges-screenconnect-admins-to-patch-critical-rce-f…
- https://github.com/watchtowrlabs/connectwise-screenconnect_auth-bypass-add-user-poc
- https://github.com/rapid7/metasploit-framework/pull/18870
- https://www.horizon3.ai/attack-research/red-team/connectwise-screenconnect-auth-bypass-deep-dive/
- https://techcrunch.com/2024/02/21/researchers-warn-high-risk-connectwise-flaw-under-attack-is-embarrassingly-…
- https://www.securityweek.com/connectwise-confirms-screenconnect-flaw-under-active-exploitation/
- https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass
ConnectWise의 다른 악용된 결함
| 추가됨 | 취약점 | 제품 | 심각도 | 공격 가능성 |
|---|---|---|---|---|
| 2026. 9. 11. | Improper Privilege Management and Missing Authorization | ScreenConnect | 치명적 9.9 | 0.9% |
| 2026. 4. 28. | Path Traversal | ScreenConnect | 높음 8.4 | 95% |
| 2025. 6. 2. | Improper Authentication | ScreenConnect | 높음 8.1 | 3.6% |
출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.